Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/9B242FAF8BF750D082D9833088BE87F76601AEEB568E18399C1CEECCC2EDFC7E/0/3139302e372e3232342e302f31392d3234203d3e203237383831.roa
File:                     3139302e372e3232342e302f31392d3234203d3e203237383831.roa (raw, json)
Hash identifier:          6CpVikwYFpXB8999RfInScLcTpT9LiB2FXRjZrdXlUE=
Subject key identifier:   0F:8A:59:DD:25:6A:90:C7:19:F2:25:72:A4:A0:BF:CA:1B:E7:D3:66
Certificate issuer:       /CN=DECCD2773167F746E0E146E321731A3F7D19EEEC
Certificate serial:       30D06168886DC3EC85E300D2EEA9D19C43F5BE8C
Authority key identifier: DE:CC:D2:77:31:67:F7:46:E0:E1:46:E3:21:73:1A:3F:7D:19:EE:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9B242FAF8BF750D082D9833088BE87F76601AEEB568E18399C1CEECCC2EDFC7E/0/3139302e372e3232342e302f31392d3234203d3e203237383831.roa
Signing time:             Mon 07 Sep 2026 21:34:12 +0000
ROA not before:           Mon 07 Sep 2026 21:29:12 +0000
ROA not after:            Mon 06 Sep 2027 21:34:12 +0000
asID:                     27881
IP address blocks:        190.7.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9B242FAF8BF750D082D9833088BE87F76601AEEB568E18399C1CEECCC2EDFC7E/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9B242FAF8BF750D082D9833088BE87F76601AEEB568E18399C1CEECCC2EDFC7E/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:d0:61:68:88:6d:c3:ec:85:e3:00:d2:ee:a9:d1:9c:43:f5:be:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DECCD2773167F746E0E146E321731A3F7D19EEEC
        Validity
            Not Before: Sep  7 21:29:12 2026 GMT
            Not After : Sep  6 21:34:12 2027 GMT
        Subject: CN=0F8A59DD256A90C719F22572A4A0BFCA1BE7D366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2f:2a:8e:37:2e:cd:48:67:ae:84:68:c1:a5:
                    88:8e:f7:c3:67:cd:33:2e:29:52:30:ad:b8:16:8d:
                    f7:0c:07:e6:3d:3d:c7:22:2c:db:85:77:0b:85:13:
                    88:e3:dd:3d:56:3e:9d:4c:6d:67:43:59:c2:22:27:
                    d7:1d:a0:26:91:9c:66:40:97:7a:48:8d:6b:d3:ce:
                    cc:74:f8:c8:57:d2:00:30:59:6e:da:b1:29:65:14:
                    2c:f2:2b:0e:89:9e:45:d9:6b:5e:61:74:93:1c:8e:
                    93:ce:8e:a1:d2:cc:2d:e3:7b:3a:44:c9:4f:21:aa:
                    c7:e2:b2:38:9b:bc:42:e4:fe:ee:9d:28:5e:17:5c:
                    21:b1:91:e6:56:21:59:15:a8:a2:47:bf:83:c0:ca:
                    da:fb:b3:bc:83:52:b8:2f:eb:5f:a7:29:2d:e9:bb:
                    0c:9a:28:ca:bb:30:9e:d4:50:e7:79:ee:4d:00:12:
                    6f:29:87:64:b5:db:2f:65:4e:f8:ed:4f:f1:d8:d1:
                    1f:20:2b:be:e5:70:74:6c:90:c8:b1:71:6f:83:e0:
                    d8:ee:9f:7d:e5:aa:0c:be:48:f7:3e:af:fd:9a:22:
                    db:3c:7e:d4:9b:f8:6e:90:a7:70:8e:c4:46:58:84:
                    58:d0:83:3b:9b:c1:34:d7:d7:66:d9:94:f9:f5:4c:
                    56:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:8A:59:DD:25:6A:90:C7:19:F2:25:72:A4:A0:BF:CA:1B:E7:D3:66
            X509v3 Authority Key Identifier:
                keyid:DE:CC:D2:77:31:67:F7:46:E0:E1:46:E3:21:73:1A:3F:7D:19:EE:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9B242FAF8BF750D082D9833088BE87F76601AEEB568E18399C1CEECCC2EDFC7E/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B242FAF8BF750D082D9833088BE87F76601AEEB568E18399C1CEECCC2EDFC7E/0/3139302e372e3232342e302f31392d3234203d3e203237383831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.7.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         43:77:c3:21:50:5f:69:ce:5a:a8:43:49:fb:bd:3c:45:13:e1:
         04:2a:c6:86:37:39:82:69:43:e5:07:ab:27:f1:2c:d5:17:b5:
         04:9e:4b:0b:89:d5:93:12:83:51:2c:76:84:dc:fe:c8:e4:4a:
         a7:2a:33:60:0b:f1:cb:b9:77:02:ae:0c:b5:92:98:e3:cc:81:
         76:db:f2:ea:0e:c8:22:7c:86:31:02:d9:7c:2b:bf:0c:d5:e9:
         d5:ec:d7:44:ed:0d:b1:6e:f4:f9:75:3f:ff:dc:ef:af:0e:7e:
         d7:72:33:af:5f:3a:1d:41:c7:9f:6b:ed:5c:63:1f:05:06:29:
         52:86:c7:bb:66:a0:52:5a:12:88:29:e7:b7:ed:39:63:aa:4f:
         fb:d5:d9:3a:a2:2f:7e:9d:95:15:e0:af:91:18:66:ef:d0:f8:
         76:46:21:d5:5b:c1:23:c8:e3:df:79:f5:56:c2:2c:1d:bf:c1:
         79:e9:d2:6a:5d:6d:d5:f6:5e:18:8a:ac:e9:6b:3d:f3:c1:0d:
         59:99:42:aa:46:5f:ed:cd:da:ba:ea:fa:c4:9e:c3:1d:88:5e:
         36:f8:42:47:27:4b:dc:6e:e1:e7:68:15:3b:35:7b:ed:53:e1:
         6d:2d:8f:8c:fa:e8:21:1c:32:a8:5b:27:c3:35:44:17:3e:30:
         a2:5f:ad:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 05:44:22 2026 by rpki-client